Inditex Discloses Supplier Data Breach, Asserts Customer Data Remains Secure

Spanish fashion giant Inditex SA, owner of Zara, has publicly disclosed a data breach at an external firm. The company stated that unauthorized individuals gained access to information concerning business relationships at the world's largest clothing retailer. It was reported that the breach occurred at the level of an Inditex supplier or service provider and did not directly target the company's own systems. The compromised data is said to relate to the company's commercial operations and relationships. In its statement, Inditex specifically emphasized that customer records were not affected by this incident and remain secure. This means financial information and personal consumer data were not within the scope of the breach. The company stated that after detecting the incident, it notified the relevant data protection authorities and launched an investigation. It announced that it has taken the necessary measures to limit the impact of the breach and prevent similar events. This type of supply chain data breach once again demonstrates that large companies cannot limit their cybersecurity audits solely to their own systems. Inditex has confirmed that security vulnerabilities in its business partners' systems can also risk its own operations. Not investment advice.